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1. Introduction 


The RC4 [RC4] algorithm is a widely used stream cipher. Test vectors 
for algorithms are useful for implementers. The RC4 cipher can use 
different key lengths. Advances in crypto-analysis [FMcG] [MANTINO1] 
[MIRONOV] [MANTINO5] suggest that initial parts of the stream output 
need to be discarded. This document contains several test vectors 
for different key lengths and for different offsets in the stream. 


Motivation for this document arose from the implementation of 
[RFC4345]. 


The test vectors provided in this document have been collected by 
generating RC4 keystream output from three separate implementations 


and comparing the streams. The RC4 implementations used are 
Libgcrypt 1.4.4 [LIBGCRYPT], Nettle 2.0 [NETTLE], and a custom 
implementation. 


The document contains test vectors for two different keys: 


Key 1: The key byte index (starting on one), that is: 0x01, 0x02, 
0x03, 0x04,... 


Key 2: Generated by hashing the string "Internet Engineering Task 
Force" with the SHA-256 [SHS] [RFC4634] hash function, using the 
following command: 


$ echo -n "Internet Engineering Task Force" | sha256sum 
lada31d5cf688221c109163908ebe51debb46227c6cc8b37641910833222772a 


The generated string has also been verified using the SHA-256 hash 
function implementation in OpenSSL (versions 0.9.81 and 1.0.0a) 
[OPENSSL]. 


The digest that is generated is then truncated to the appropriate 


length, keeping the Least Significant Bit (LSB) part of the digest as 
the key. 
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The key lengths used in this document are 40, 56, 64, 80, 128, 192, 


and 256 bits, respectively. The stream offsets used in this document 


are 0, 256, 512, 768, 1024, 1536, 2048, 3072, and 4096 bytes, 
respectively. Offset 1536 corresponds to recommendations in 
[RFC4345]. The offsets 768 and 3072 correspond to recommendations 
[SANS]. 


2. Test Vectors for RC4 


Key length: 40 bits. 
key: 0x0102030405 


DEC 0 HEX 0 b2 39 63 05 £0 3d cO 27 cc c3 52 4a Oa 11 18 
DEC 16 HEX 10 69 82 94 4f 18 fc 82 d5 89 c4 03 a4 Ta Od 09 
DEC 240 HEX £0 28 cb 11 32 c9 6c e2 86 42 ld ca ad b8 b6 9e 
DEC 256 HEX 100 lc fc f6 2b 03 ed db 64 ld 77 df cf 7f 8d 8c 
DEC 496 HEX 1£0 42 b7 d0 cd d9 18 a8 a3 3d d5 17 81 c8 1f 40 
DEC 512 HEX 200 64 59 84 44 32 a7 da 92 3c fb 3e b4 98 06 61 
DEC 752 HEX 2f0 ec 10 32 7b de 2b ee fd 18 £9 27 76 80 45 7e 
DEC 768 HEX 300 eb 62 63 8d 4f Ob al fe 9f ca 20 e0 5b £8 ff 
DEC 1008 HEX  3f0 45 12 90 48 e6 a0 ed Ob 56 b4 9033 8f 07 8d 
DEC 1024 HEX 400 30 ab bc c7 c2 0b O1 60 9f 23 ee 2d 5f 6b b7 
DEC 1520 HEX  5f0 32 94 £7 44 d8 £9 79 05 07 e7 Of 62 e5 bb ce 
DEC 1536 HEX 600 d8 72 9d b4 18 82 25 9b ee 4f 82 53 25 £5 al 
DEC 2032 HEX  7f0 le bl 4a Oc 13 b3 bf 47 fa 2a 0b a9 3a d4 5b 
DEC 2048 HEX 800 cc 58 2f 8b a9 f2 65 e2 bl be 91 12 e9 75 d2 
DEC 3056 HEX bf0 £2 e3 Of 9b dl 02 ec bf 75 aa ad e9 be 35 c4 
DEC 3072 HEX  c00 ec 0e 11 c4 79 dc 32 9d c8 da 79 68 fe 96 56 
DEC 4080 HEX ff0 06 83 26 a2 11 84 16 d2 1f 9d 04 b2 cd 1c a0 
DEC 4096 HEX 1000 ff 25 b5 89 95 99 67 07 e5 1f bd f0 8b 34 d8 
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key: 
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DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 


Key 


key: 


length: 56 bits. 
0x01020304050607 
O HEX 0: 29 3f 
16 HEX 10: e6 20 
240 HEX £0: 91 4f 
256 HEX 100: dod fd 
496 HEX 1f0: 75 £8 
512 HEX 200: Ob b8 
752 HEX 2f0: c2 91 
768 HEX 300: 32 82 
1008 HEX 3f0: f3 b9 
1024 HEX 400: 8e cb 
1520 HEX 5f0: d2 aa 
1536 HEX 600: 78 b2 
2032 HEX 7f0: £4 33 
2048 HEX 800: 05 45 
3056 HEX bf0: ad fd 
3072 HEX c00: ad 26 
4080 HEX ff0: £3 17 
4096 HEX 1000: e7 4b 
length: 64 bits. 
0x0102030405060708 
O HEX 0 97 ab 
16 HEX 10: 82 63 
240 HEX f0: 96 36 
256 HEX 100 dO a9 
496 HEX 1f0 73 23 
512 HEX 200 16 3b 
752 HEX  2f0 49 d6 
768 HEX 300 44 17 
1008 HEX 3£f0 27 3c 
1024 HEX 400 c6 dO 
1520 HEX  5f0 1f e8 
1536 HEX 600 83 69 
2032 HEX  7f0 0a 01 
2048 HEX 800 c2 cd 
3056 HEX bf0 26 b5 
3072 HEX c00 bc 76 
4080 HEX ff0 d5 fa 
4096 HEX 1000 3f b4 
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Key length: 80 bits. 
key: 0x0102030405060708090a 
DEC O HEX 0: ed e3 b0 46 43 e5 86 
DEC 16 HEX 10: 03 51 6b a7 8f 41 3b 
DEC 240 HEX f0: 3c fd 6c b5 8e e0 fd 
DEC 256 HEX 100: 48 53 2b 21 fb 60 79 
DEC 496 HEX 1f0: 3e 8c ea 98 01 71 09 
DEC 512 HEX 200: e2 Of b4 9b db 33 Te 
DEC 752 HEX 2f0: 5c 25 21 ea cd 79 66 
DEC 768 HEX 300: e0 67 a7 03 19 31 a2 
DEC 1008 HEX 3f0: a6 4f 70 af 88 ae 56 
DEC 1024 HEX 400: f4 49 03 1d e3 12 81 
DEC 1520 HEX 5f0: bd ae 85 92 4b 3c bl 
DEC 1536 HEX 600: 8a Of ed db ac 86 5a 
DEC 2032 HEX 7f0: b5 5a 0a 5b 51 al 2a 
DEC 2048 HEX 800: d9 a0 9c ea 3c e7 5f 
DEC 3056 HEX bf0: 55 22 25 ed 11 77 £4 
DEC 3072 HEX c00: 7e 82 cb ab fc 95 38 
DEC 4080 HEX ff0: 1f 13 5e dl 4c e6 Oa 
DEC 4096 HEX 1000: 08 b6 be 45 12 4a 43 
Key length: 128 bits. 
key: 0x0102030405060708090a0b0c0d0e0f10 
DEC O HEX 0: 9a c7 cc 9a 60 9d le 
DEC 16 HEX 10: 52 48 c4 95 90 14 12 
DEC 240 HEX fO: 06 59 02 e4 b6 20 f6 
DEC 256 HEX 100: d3 9d 56 6b c6 bc e3 
DEC 496 HEX 1f0: b6 dl e6 c4 a5 e4 77 
DEC 512 HEX 200: c6 8c 1d 5c 55 9a 97 
DEC 752 HEX 2f0: c5 ec £8 8d e8 97 fd 
DEC 768 HEX 300: ec cb el 3d el fc c9 
DEC 1008 HEX  3f0: e7 a7 25 74 £8 78 2a 
DEC 1024 HEX 400: bd £0 32 4e 60 83 dc 
DEC 1520 HEX 5f0: b4 01 10 c4 19 Ob 56 
DEC 1536 HEX 600: ff a0 b5 14 64 7e cO 
DEC 2032 HEX 7f0: dO 3d 1b cO 3c d3 3d 
DEC 2048 HEX 800: 8a 44 12 64 11 ea a7 
DEC 3056 HEX bf0: fa be b7 60 28 ad e2 
DEC 3072 HEX c00: c0 5d 88 ab d5 03 57 
DEC 4080 HEX ff0: ff 38 26 5c 16 42 cl 
DEC 4096 HEX 1000: a3 6a 4c 30 la e8 ac 
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192 bits. 
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Key length: 
key: 
DEC 0 HEX 
DEC 16 HEX 
DEC 240 HEX 
DEC 256 HEX 
DEC 496 HEX 
DEC 512 HEX 
DEC 752 HEX 
DEC 768 HEX 
DEC 1008 HEX 
DEC 1024 HEX 
DEC 1520 HEX 
DEC 1536 HEX 
DEC 2032 HEX 
DEC 2048 HEX 
DEC 3056 HEX 
DEC 3072 HEX 
DEC 4080 HEX 
DEC 4096 HEX 
Key length: 
key: 
DEC 0 HEX 
DEC 16 HEX 
DEC 240 HEX 
DEC 256 HEX 
DEC 496 HEX 
DEC 512 HEX 
DEC 752 HEX 
DEC 768 HEX 
DEC 1008 HEX 
DEC 1024 HEX 
DEC 1520 HEX 
DEC 1536 HEX 
DEC 2032 HEX 
DEC 2048 HEX 
DEC 3056 HEX 
DEC 3072 HEX 
DEC 4080 HEX 
DEC 4096 HEX 
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3f 
la 
c3 
af 


1d 
43 
TE 
97 
93 
c 
b3 
1b 
bd 
e9 
88 
30 
64 
ab 
52 
9c 
00 
2b 


91 
80 
d8 
b6 
6b 
cd 
74 
35 
90 
58 
15 
73 
ec 
34 
£9 
18 
b9 
48 
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Test Vectors 


Key length: 40 bits. 
key: 0x833222772a 

DEC 0 HEX 0: 80 
DEC 16 HEX 10: 20 
DEC 240 HEX £0: fa 
DEC 256 HEX 100: fO 
DEC 496 HEX  1f0: lc 
DEC 512 HEX 200: 3d 
DEC 752 HEX 2f0: e4 
DEC 768 HEX 300: 75 
DEC 1008 HEX 3f0: 6d 
DEC 1024 HEX 400: 78 
DEC 1520 HEX 5f0: ad 
DEC 1536 HEX 600: 62 
DEC 2032 HEX 7f0: e7 
DEC 2048 HEX 800: 78 
DEC 3056 HEX bf0: af 
DEC 3072 HEX c00: db 
DEC 4080 HEX ff0: 63 
DEC 4096 HEX 1000: bf 
Key length: 56 bits. 
key: 0x1910833222772a 
DEC 0 HEX 0: be 
DEC 16 HEX 10: 7a 
DEC 240 HEX fO; 3f 
DEC 256 HEX 100: be 
DEC 496 HEX 1f0: 74 
DEC 512 HEX 200: 9b 
DEC 752 HEX 2f0: ce 
DEC 768 HEX 300: 8b 
DEC 1008 HEX 3f0: 62 
DEC 1024 HEX 400: 42 
DEC 1520 HEX 5f0: cc 
DEC 1536 HEX 600: f7 
DEC 2032 HEX 7f0: 2a 
DEC 2048 HEX 800: 86 
DEC 3056 HEX bf0: 55 
DEC 3072 HEX c00: 1b 
DEC 4080 HEX ff0: ec 
DEC 4096 HEX 1000: 02 
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ad 
£0 
al 
da 
7e 
b9 
£9 
d5 
a4 
28 
b8 
51 
TT 
5b 
ec 
cl 
49 
42 


92 
e6 
09 
aa 
e0 
5e 
17 
df 
6f 
da 
03 
Of 
3a 
26 
£8 
15 
do 
78 


97 
60 
48 
£5 
2f 
b2 
£7 
ef 
53 
do 
9c 
d8 
9b 
60 
cO 
a7 
dl 
cs 


22 
27 
31 
9e 
4d 
81 
8f 
55 
DE 
ac 
fd 
14 
30 
17 
77 
56 
e9 
81 


for the Stream Cipher RC4 


bd c9 73 df 
c2 f2 e5 12 
e9 90 46 18 
ba b3 d5 96 
c4 63 92 32 
49 40 6c c8 
e0 06 61 54 
26 2b 44 c4 
db £8 le 82 
74 11 9c ab 
ea 9a 15 fb 
7£ d4 aa ae 
d6 dd 9b 22 
fd 7e c4 e9 
37 fd b7 bO 
b4 9d 57 35 
26 a3 7a fc 
01. .8e- 2f 7€ 
db d3 27 4d 
41 Oc 9a 2b 
aa 03 de fb 
c8 d5 9b b6 
b4 6d 28 64 
c6 2f e0 23 
cl 82 6e fe 
cd 55 06 1c 
4d ce 65 25 
6a 8f 9a b9 
b7 91 92 a2 
12 2a 1c 98 
Ta b2 70 8a 
62 7d 22 61 
ce 4f 2e ld 
cb 93 5f 17 
66 02 be 7f 
fa b4 99 3a 
Informational 


8a 
65 
If 
83 
fe 
ed 
bb 
la 
33 
5c 
e6 
9a 
af 
EG 
83 
8c 
ba 
66 


8f 
e6 
30 
81 
8d 
ES 
cb 
06 
01 
a7 
07 
a3 
9c 
ea 
db 
33 
8d 
T 


2e 
01 
ec 
98 
29 
£f 
dl 
9c 
4a 
22 
17 
7e 
e8 
b6 
8e 
c9 
89 
bf 


c6 
93 
Of 
29 
7d 
5b 
el 
db 
£3 
fd 
ST 
15 
00 
bO 
bf 
37 
50 
26 


87 
d3 
6b 
2d 
75 
ac 
25 
f6 
3d 
b2 
29 
4a 
£8 
54 
b3 
fa 
79 
de 


6d 
df 
06 
£3 
ee 
e4 
82 
a6 
08 
13 
2f 
5d 
fe 
bl 
8e 
70 
92 
20 


9e 
d4 
20 
84 
84 
55 
b7 
3a 
88 
94 
5b 
d5 
95 
5f 
d7 
6d 
Af 
52 


14 
5b 
01 
02 
8a 
2f 
f5 
be 
7d 
Te 
53 
28 
Ob 
24 
13 
5f 
81 
24 


92 
fe 
85 
6f 
b2 
cc 
45 
el 
66 
d7 
do 
c2 
85 
35 
Ob 
61 
98 
49 


cc 
b7 
03 
LE 
00 
87 
79 
11 
39 
60 
£5 
b8 
42 
65 
e2 
bb 
6c 
a9 


al 
al 
f3 
73 
96 
a3 
56 
45 
cb 
a9 
4b 
17 
43 
Od 
cd 
a7 
04 
75 


bd 
48 
82 
96 
64 
bb 
99 
de 
Co 
37 
d4 
a0 
£9 
97 
cd 
5d 
cc 
Af 
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97 
0d 
b2 
fb 
99 
22 
9b 
68 
50 
bf 
8c 
d3 
28 
66 
26 
3b 
91 
76 


a6 
5a 
6f 
36 
bO 
f9 
a4 
4a 
2c 
82 
dc 
a8 
c2 
ca 
e0 
50 
£2 
ff 


ef 
5f 
0e 
fe 
6b 
ba 
c8 
el 
al 
ad 
a0 
£3 
81 
Of 
83 
TG 
4f 
81 


69 
63 
2a 
ti 
6c 
32 
61 
57 
c3 
56 
33 
a4 
d6 
Oa 
fd 
1f 
c2 
3f 


da 
cO 
d9 
5a 
c8 
12 
97 
b9 
e3 
bb 
5c 
00 
e2 
ab 
82 
£0 
dc 
15 


Ob 
e3 
64 
81 
fe 
b8 
40 
8a 
49 
82 
ag 
ld 
al 
e9 
c8 
ed 
e9 
61 
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Test Vectors 


Key length: 64 bits. 

key: 0x641910833222772a 

DEC O HEX 0: bb £6 09 
DEC 16 HEX 10: 46 10 la 
DEC 240 HEX f0: cb el ff 
DEC 256 HEX 100: 34 79 38 
DEC 496 HEX 1f0: 78 67 a7 
DEC 512 HEX 200: 8d 3e 9e 
DEC 752 HEX 2f0: 94 23 37 
DEC 768 HEX 300: b8 54 8c 
DEC 1008 HEX 3f0: 02 11 c7 
DEC 1024 HEX 400: bd a6 4f 
DEC 1520 HEX 5f0: bd 38 20 
DEC 1536 HEX 600: dO 16 86 
DEC 2032 HEX 7f0: 97 bO £0 
DEC 2048 HEX 800: e5 96 16 
DEC 3056 HEX bf0: c4 7e 0d 
DEC 3072 HEX c00: 5a e4 fl 
DEC 4080 HEX ff0: 6b 6b 09 
DEC 4096 HEX 1000: 81 70 cc 
Key length: 80 bits. 

key: 0x8b37641910833222772a 

DEC O HEX 0: ab 65 c2 
DEC 16 HEX 10: bb 75 90 
DEC 240 HEX f0: b9 01 e8 
DEC 256 HEX 100: 3d 25 ce 
DEC 496 HEX 1f0: 12 cl aa 
DEC 512 HEX 200: 28 f2 b3 
DEC 752 HEX 2f0: bd 9e £8 
DEC 768 HEX 300: 67 55 9c 
DEC 1008 HEX 3f0: 8b ab 26 
DEC 1024 HEX 400: 31 18 5a 
DEC 1520 HEX 5f0: 56 4d 3d 
DEC 1536 HEX 600: 3c 07 78 
DEC 2032 HEX 7f0: £3 43 69 
DEC 2048 HEX 800: 02 f3 1c 
DEC 3056 HEX bf0: 72 da 64 
DEC 3072 HEX c00: 4e Oa 8c 
DEC 4080 HEX ff0: 43 8d d5 
DEC 4096 HEX 1000: 5f 6b fc 
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for 


de 94 13 17 
6d ab 43 11 
f2 lc 96 £3 
bf fa 40 09 
86 dO 0a 71 
lc ae fc cc 
f8 fd 76 £0 
10 £5 16 67 
c6 19 Oc 9e 
65 27 6d 2a 
£7 32 ff b5 
16 86 19 07 
f2 24 b2 d2 
e4 69 78 79 
cl 66 09 19 
28 96 b8 37 
8d Oc 29 3b 
3c cd 92 a6 
6e dd b2 87 
10 c2 96 58 
03 6e dl c3 
49 22 92 4c 
44 bb £8 7e 
43 4b 65 cO 
22 de 52 88 
23: 0 .52- 15 
fb c2 cl 2b 
6d 69 6f Oc 
ae 18 3c 52 
a7 b5 £7 2d 
89 Of cf 16 
81 e8 20 07 
62 83 22 8c 
6f 79 34 a7 
ea fe a0 11 
73 81 58 74 
Informational 


the Stream Cipher RC4 


2d 
5d 
ee 
c5 
47 
b3 
fa 
f6 
fd 
ac 
3e 
d4 
31 
39 
cl 
9a 
c2 
98 


60 
f2 
83 
55 
75 
98 
19 
84 
Of 
fa 
34 
3€ 
fb 
31 
14 
88 
1b 
ag 


07 
6c 
£6 
12 
90 
fb 
e8 
e6 
12 
b8 
cl 
82 
71 
a0 
11 
2a 
99 
62 


Od 
od 
cd 
£0 
e6 
Ti 
61 
70 
13 
9b 
c8 
23 
5l 
b8 
30 
e2 
6f 
71 


66 
52 
le 
CE 
4d 
£8 
c5 
Oe 
34 
f9 
93 
e3 
14 
63 
01 
ad 
3d 
1b 


b2 
2d 
3c 
64 
Td 
47 
34 
a2 
e2 
42 
af 
a3 
7d 
99 
08 
26 
36 
00 


Oc 
2b 
8f 
b4 
76 
dl 
2d 
18 
c3 
02 
e7 
6c 
80 
ce 
20 
89 
80 
93 


fd 
93 
4c 
94 
f6 
00 
Gf 
96 
ab 
80 
le 
13 
ca 
bO 
53 
5e 
b4 
£0 


b6 
Af 
e0 
03 
dd 
8f 
79 
2f 
Ac 
12 
9d 
da 
8f 
ea 
8f 
b5 
bf 
9d 


al 
a2 
4d 
33 
9b 
44 
8a 
f 
18 
8b 
51 
5c 
ae 
28 
70 
81 
b9 
86 


80 
e9 
54 
4b 
fl 
64 
54 
al 
8f 
20 
33 
c8 
bO 
9a 
9e 
b5 
05 
d3 


Od 
dl 
do 
23 
2c 
c6 
£7 
25 
5e 
38 
06 
7d 
44 
e7 
17 
d6 
38 
97 
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71 
36 
2c 
Od 
e5 
12 
81 
9b 
2e 
3a 
e2 
CÊ 
3a 
£9 
69 
53 
18 
8f 


le 
6d 
a6 
d7 
38 
ea 
83 
73 
ab 
el 
le 
67 
63 
91 
95 
do 
da 
93 


69 
04 
bd 
dl 
20 
Ob 
06 
30 
06 
80 
Te 
57 
£7 
56 
aa 
d6 
b6 
e7 


60 
29 
ab 
8a 
f4 
17 
93 
5a 
£2 
32 
44 
b9 
b2 
bf 
61 
c8 
2a 
57 
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26 
a9 
£0 
a7 
e3 
32 
72 
£7 
c4 
8e 
73 
49 
a0 
dl 
At 
b0 
d9 
b9 


5G 
30 
05 
6c 
9b 
Od 
04 
32 
41 
a2 
b5 
£4 
dd 
a7 
6f 
£4 
68 
d8 
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Key length: 


key: 


DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 


Key 


key: 
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Oxebb4 6227c6cc8b37641910833222772a 


0 

16 
240 
256 
496 
512 
752 
768 
1008 
1024 
1520 
1536 
2032 
2048 
3056 
3072 
4080 
4096 


EX 


IEX 


length: 


[nal 
x 


E [p 
x x 


= 
EX 


D Dd Dd] Ed Dd Dd E] Dd Dd Dd E Dd Dd [Ed 
MMMM PX PX PX 0X 0X PX XX 


Test Vectors for the Stream Cipher RC4 


128 bits. 


0: 
10: 
£0: 

100: 
1f0: 
200: 
2f0: 
300: 
3f0: 
400: 
SEOs 
600: 
7f0: 
800: 
bf0: 
c00: 
ff0: 
1000: 


72 
c3 
b3 
48 
08 
97 
Se 
ef 
b6 
b5 
3c 
11 
00 
58 
34 
84 
a2 
5b 


192 bits. 
0xc109163908ebe51debb46227c6cc8b37641910833222772a 


54 
el 
cf 
83 
17 
da 
80 
dl 
34 
£5 
53 
ba 
e8 
4b 
36 
le 
63 
el 


Oc 
66 
39 
47 
12 
Od 
b8 
2d 
05 
15 
70 
75 
a5 
65 
b2 
a9 
22 
be 


b6 
35 
cc 
No 
a6 
5f 
a3 
5e 
96 
85 
2c 
ef 
2d 
16 
82 
5a 
ed 
dd 


94 
fd 
4a 
d8 
8c 
ac 
99 
67 
95 
a8 
04 
da 
42 
fd 
la 
21 
la 
b4 


4e 
ee 
92 
87 
db 
9f 
do 
7d 
82 
4c 
Te 
e6 
8c 
e5 
ee 
Ob 
d6 
2e 


b6 
ea 
40 
1d 
46 
ef 
93 
6f 
51 
c5 
7e 
6e 
bb 
bb 
d2 
8f 
TT 
78 


6b 5a 20 b5 
e2 37 a8 54 
2f b4 al la 
e2 a4 46 ad 
d6 64 92 6a 
26 ae ee d4 
le £f0 0c 8e 
5f fa aa bc 
bf 58 8e aa 
db 76 c8 89 
ec cb 39 df 
d9 ce b6 51 
6d b5 4e 3c 
Oa bd 38 1b 
33 bd 14 8b 
84 75 04 5d 
84 fb 82 62 
98 d6 96 Of 
Informational 


3e 
CE 
aa 
a4 
9f 
40 
bO 
15 
4f 
01 
8c 
e7 
a0 
5b 
ad 
ES 
b8 
7d 


df 
9c 
bf 
94 
21 
ad 
7b 
45 
24 
17 
bc 
56 
21 
48 
44 
6e 
33 
59 


44 
a8 
75 
2d 
53 
98 
Oc 
c2 
bc 
54 
03 
de 
alae 
06 
e9 
8a 
cc 
e5 


el 
04 
cb 
be 
42 
72 
ed 
cl 
9f 
f5 
8e 
46 
ec 
41 
99 
5f 
b4 
37 


e2 
65 
b4 
0e 
06 
d4 
9a 
02 
52 
e3 
32 
84 
63 
d7 
d9 
9b 
82 
ae 


31 
36 
a4 
24 
ad 
3b 
93 
3d 
e5 
90 
3b 
a5 
2c 
04 
db 
2c 
98 
3f 


ec 
ff 
5d 
£7 
36 
a2 
42 
07 
do 
ad 
36 
22 
3f 
09 
£5 
20 
fe 
Ob 


ag 
be 
22 
9d 
da 
ac 
de 
c6 
22 
03 
98 
3e 
65 
e8 
2d 
cf 
a5 
db 


84 
97 
61 
98 
b3 
5f 
09 
bf 
aa 
63 
934 
60 
58 
00 
86 
b2 
52 
43 


50 
Te 
82 
ef 
20 
5d 
LS 
80 
a6 
05 
20 
2b 
b3 
30 
7f 
be 
95 
ea 


59 
dc 
75 
ac 
f4 
63 
el 
20 
15 
35 
84 
e0 
Té 
a9 
56 
62 
8f 
54 


ca 
35 
ef 
c4 
2b 
69 
d2 
a0 
ca 
8b 
db 
07 
8e 
b3 
08 
ae 
40 
6c 


3d 
03 
aa 
do 
ES 
2d 
7f 
0a 
60 
4e 
05 
di 
95 
cd 
cd 
86 
9c 
54 


21 
84 
25 
8c 
2b 
55 
al 
2f 
d7 
db 
60 
56 
bd 
80 
63 
53 
£0 
6f 


c 
92 
bb 
2b 
7a 
30 
4e 
11 
34 
DE 
al 
e0 
2b 
9a 
8f 
24 
0e 
56 
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la 
24 
ad 
92 
58 
b8 
10 
4a 
39 
81 
ld 
60 
ba 
f2 
£0 
a2 
54 
75 


98 
Af 
£2 
94 
Af 
52 
eb 
71 
6a 
T2 
b1 
5e 
a0 
62 
30 
ed 
92 
74 


5a 
d2 
05 
2b 
da 
17 
15 
db 
36 
51 
a4 
b7 
58 
ae 
d9 
7d 
5f 
c2 


9d 
45 
d2 
12 
46 
33 
35 
93 
ea 
75 
27 
3b 
42 
cb 
d9 
fd 
37 
33 


30 
0b 
9f 
9f 
95 
61 
ac 
fe 
44 
4e 
95 
70 
7e 
de 
b6 
25 
4a 
9b 


a7 
ce 
01 
4f 
94 
ag 
8c 
a2 
fa 
e3 
9c 
90 
07 
23 
fb 
9e 
bc 
91 
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Key 


key: 


DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 
DEC 


3 


6229 


length: 


0 

16 
240 
256 
496 
512 
752 
768 
1008 
1024 
1520 
1536 
2032 
2048 
3056 
3072 
4080 
4096 


EX 


IEX 


Test Vectors for the Stream Cipher RC4 


256 bits. 


0 
10% 
fO: 

100: 
1f0: 
200: 
2f0: 
300: 
3f0: 
400: 
5£f0:; 
600: 
TEO 
800: 
bf0: 
c00: 
ff0: 
1000: 


dd 
c8 
af 
f8 
25 
9d 
al 
85 
5f 
34 
ac 
8c 
13 
dd 
£0 
9e 
d5 
37 


5b 
44 
3e 
cb 
c3 
cb 
d3 
14 
40 
77 
4e 
3c 
c4 
d2 
8f 
a3 
a3 
Ob 
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cb 
6f 
30 
62 
00 
cl 
07 
a5 
d5 
el 
95 
13 
b9 
78 
2e 
6c 
9e 
Le 


00 
8f 
f9 
74 
5a 
83 
8d 
49 
9e 
fT: 
36 
f8 
cl 
20 
66 
52 
3d 
qf 


18 
71 
cO 
db 
le 
e8 
fa 
58 
el 
64 
8d 
c2 
df 
55 
d2 
55 
fc 
e6 


e9 
ab 
95 
99 
b8 
cb 
91 
58 
bO 
a4 
99 
38 
b6 
01 
8e 
31 
c5 
55 


22 
£7 
04 
b8 
5d 
99 
69 
09 
3b 
1b 
b9 
8b 
65 
26 
di 
b8 
02 
91 


d4 
37 
59 
Ob 
e0 
4b 
50 
6f 
33 
ac 
eb 
b7 
79 
69 
43 
80 
80 
6d 


94 
68 
38 
1d 
76 
T2 
3e 
59 
73 
ef 
78 
3f 
ed 
8e 
£3 
ba 
ba 
97 


75 
53 
15 
20 
25 
7b 
d9 
6e 
8e 
£9 
b8 
38 
dd 
fa 
a2 
12 
c4 
fd 


9d 
53 
15 
12 
98 
75 
d4 
4b 
fa 
Ob 
da 
57 
8a 
ad 
37 
43 
a6 
Od 


Te 
eb 
75 
a9 
39 
be 
49 
cd 
60 
f1 
8f 
6e 
28 
c6 
cf 
34 
b5 
47 


39 
89 
ES 
8e 
ab 
31 
ld 
66 
b2 
Af 
81 
65 
Ob 
4b 
9d 
£5 
aa 
ca 
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5d 
al 
fb 
d4 
71 
80 
ee 
bl 
25 
92 
ff 
b7 
9f 
64 
e7 
7b 
Od 
ld 


02 
c9 
90 
8f 
98 
76 
4e 
06 
5d 
b7 
a7 
c4 
73 
f6 
35 
Ob 
ca 
72 


The RC4 algorithm does not meet the basic criteria required for an 


encryption algorithm, 


as its output is distinguishable from random. 
The use of RC4 continues to be recommended against; 
its use in new specifications is discouraged. 


in particular, 
This note is intended 


Oxlada31d5cf688221c109163908ebe51debb46227c6cc8b37641910833222772a 


a3 
eb 
98 
0e 
ab 
9c 
b2 
65 
31 
cc 
95 
46 
16 
6e 
59 
70 
Td 
b8 


only to aid the interoperability of existing specifications that make 
use of RC4. 


Copying Conditions 


This document is intended to be considered a Code Component, 
thus effectively available under the Simplified BSD License. 


References 


Normative References 


[RC4] 


Schneier, 
Algorithms, 
Wiley and Sons, 


B. 


, 


Informative References 


[RFC4345] 


Strombergson & Josefsson 


Harris, 


(SSH) 


B 


2, 


Transport Layer Protocol", 


"Applied Cryptography: 
and Source Code in C", 
New York, NY, 


1996. 


Protocols, 
Second Edition, 


and is 


John 


"Improved Arcfour Modes for the Secure Shell 
January 2006. 


Informational 


RFC 4345, 


[Page 10] 


RFC 6229 


[RFC4634] 


[FMcG] 


[LIBGCRYPT] 


[MANTINO1] 


[MANTINO5] 


[MIRONOV ] 


[NETTLE] 


[OPENSSL] 


[SANS] 


[SHS] 


Test Vectors for the Stream Cipher RC4 May 2011 


Eastlake 3rd, D. and T. Hansen, "US Secure Hash 
Algorithms (SHA and HMAC-SHA)", RFC 4634, July 2006. 


Fluhrer, S. and D. McGrew, "Statistical Analysis of the 
Alleged RC4 Keystream Generator", 
«http://www.mindspring.com/^dmcgrew/rc4-03.pdf». 


Koch, W., "Libgcrypt", 
<http://directory.fsf.org/project/libgcrypt/>. 


Mantin, I., "Analysis of the Stream Cipher RC4", <http:/ 
/www.wisdom.weizmann.ac.il/~itsik/RC4/Papers/ 
Mantinl.zip>. 


Mantin, I., "Predicting and Distinguishing Attacks on 
RC4 Keystream Generator", Proceedings of EUROCRYPT 2005, 
<http://www.iacr.org/cryptodb/archive/2005/EUROCRYPT/ 
2597/2597 .pdf>. 


Mironov, I., "(Not So) Random Shuffles of RC4", 
<http://eprint.iacr.org/2002/067.pdf>. 


Moeller, N., "Nettle - a low-level crypto library", 
<http://www.gnu.org/software/nettle/>. 


OpenSSL Team, "The OpenSSL Project", 
<http://www.openssl.org/>. 


Hopwood, D., "Standard Cryptographic Algorithm Naming 
(SANS) entry on RC4", <http://www.users.zetnet.co.uk/ 
hopwood/crypto/scan/cs.html#RC4>. 


National Institute of Standards and Technology (NIST), 
"FIPS Publication 180-3: Secure Hash Standard (SHS)", 
October 2008, <http://csrc.nist.gov/publications/fips/ 
fips180-3/fips180-3_final.paf>. 


Strombergson $ Josefsson Informational [Page 11] 


RFC 6229 Test Vectors for the Stream Cipher RC4 May 2011 


Authors’ Addresses 


Joachim Strombergson 
SecWorks Sweden AB 
Hogenvagen 5A 
Savedalen 433 63 

SE 


EMail: joachim@secworks.se 


Simon Josefsson 

Simon Josefsson Datakonsult AB 
Hagagatan 24 

Stockholm 113 47 

SE 


EMail: simon@josefsson.org 
URI: http://josefsson.org/ 


Strombergson & Josefsson Informational [Page 12] 


